lc5G (u/lc5G) - Readit News

lc5G commented on A privacy VPN you can verify vp.net/l/en-US/blog/Don%2... · Posted by u/MagicalTux

nneonneo · 10 days ago

The SGX TCB isn’t large enough to protect the really critical part of a private VPN: the source and destination of packets. Nothing stops them from sticking a user on their own enclave and monitoring all the traffic in-and-out.

Also, the README is full of AI slop buzzwords, which isn’t confidence-inspiring.

lc5G · 7 days ago

This is the best critique of VP.net's approach in this thread. The purpose of the enclave approach is that you can be sure they're not logging your traffic. This is an advantage over competitors. But, as you say, this does not actually work. When you connect to the VPN, you don't know whether your traffic really gets mixed with other people's traffic. If it doesn't get mixed, then no matter what the trusted enclave code does, they still know all the input and output traffic belongs to you.

lc5G commented on De-googling, so far blog.nradk.com/posts/dego... · Posted by u/nradk

guyzero · a year ago

I find it crazy that someone will say "I still consume it more than any other type of video media" but somehow just paying for it isn't an option. You can pay to make YT ads go away. And the payments go to the video creators (eventually).

lc5G · a year ago

I would pay for youtube if they provided an official API to download videos and stream videos in a client of my choice.

I prefer to watch youtube with a custom player (mpv+yt-dlp on desktop, newpipe on android). I do not want to watch youtube on the youtube website or official youtube android app. The custom clients I am using are unofficial. They reverse engineer youtube to make it work. They often break when youtube changes something.

lc5G commented on Ask HN: How to do literal web searches after Google destroyed the “ ” feature? · Posted by u/7moritz7

bambax · 2 years ago

> I used this quite frequently but since Google """"improved"""" it last year (there was a popular HN post complaining about this) it doesn't work anymore

That's not my experience? The quotes still seem to work for me? Do you have a specific example? And / or can you point to said HN post?

lc5G · 2 years ago

I can confirm the experience that sometimes searches for quoted terms yield pages that do not contain the quoted term exactly. I don't have a specific example from the top of my head.

lc5G commented on WebAssembly: Docker Without Containers wasmlabs.dev/articles/doc... · Posted by u/RebootStr

_0w8t · 3 years ago

Despite the sandboxing one still cannot run untrsuted WASM code in the same process as trusted code due to hardware bugs. CPU vendors are not going to fix those anytime soon. Their message is to always use separated address space for security isolation.

And since one need an external process in any case, native containers wins as they are faster by factor of two over WASM.

EDIT:

It does not even make sense to use WASM inside a native container as an extra security layer. With the overhead of WASM one can just put a container inside a VM and still run things faster.

lc5G · 3 years ago

Could you give some examples of hardware bugs that CPU vendors are not going to fix and would break this security model?

lc5G commented on My 40-liter backpack travel guide vitalik.ca/general/2022/0... · Posted by u/ronyfadel

theshrike79 · 3 years ago

You _can_ wash merino wool if you want to. You just don't need to. Just like with jeans. Unless you actually spilled something on them and want to get the stains off, you rarely need to wash proper jeans.

> Wool is naturally hygroscopic and thus has the ability to absorb moisture and transport it away from the body leaving your skin dry and comfortable. Unlike synthetic fabrics where sweat build up becomes a breeding ground for bacteria, wool’s breathability reduces the risk of your clothes taking on unpleasant body odour.

> Because of the above, wool clothing outperforms other fibres when it comes to odour resistance, and it doesn’t need to be washed anywhere near as frequently as synthetics. Simply airing your wool garment will help cleanse the fibre. This is an added benefit if you are hiking or biking and need to keep the clothing you carry to a minimum. Reducing the number of times you washing your clothes is also beneficial for the environment [0]

[0] https://www.hdwool.com/blog/is-wool-antibacterial

lc5G · 3 years ago

Sorry, I should have clarified what part I was replying to. I was asking about the choice of detergent. You say it must be a wool detergent with lanolin while they say it doesn't matter.

I'd like to follow this up with the store too if you convince me that the detergent matters.

I appreciate your response.

lc5G commented on My 40-liter backpack travel guide vitalik.ca/general/2022/0... · Posted by u/ronyfadel

theshrike79 · 3 years ago

I sweat - a lot. Especially if I'm carrying a backpack during the summer, my whole back is just one wet spot. A cotton T-shirt is a big no-no, when one gets wet it'll be wet and clammy for the rest of the trip. I tried the technical shirt kind and while they do dry fast, I'll be freezing while it's doing that.

I discovered merino wool T-shirts about a decade ago and don't wear much else - except for a few nerdy print shirts on occasion.

Merino wool is cool even when wet and dries really quickly. It's also pretty much self-cleaning due to the lanolin (a type of fat) in the fibers, and smells don't stick to it for the same reason. Even after the sweatiest hike, I can just hang it out to dry and it's good to go.

I can go on a week's trip with just two shirts, alternating them on different days.

If you do wash a merino shirt (which you shouldn't do too often) always use a wool detergent that has lanolin in it.

And all of the above goes for all other merino garments. I've got a hoodie from a merino wool mix that I wear all around the year. It's warm during the winter and not too hot during summer nights, if I get caught in the rain it'll be dry in no time.

lc5G · 3 years ago

On the website of a big merino wool clothing store they write [1]:

> Unbound Merino clothing can be washed in a regular washing machine at a normal or cool temperature setting. You can use regular detergent, and avoid fabric softener or products with bleach.

According to you this is wrong which is surprising because they should know what they're talking about. Could you clarify? Do you have other sources?

[1] https://unboundmerino.com/blogs/help-center/when-i-do-wash-m...

lc5G commented on Google Maps now requires WiFi scanning to use navigation · Posted by u/bbarnett

KennyBlanken · 4 years ago

Xprivacy basically did this. I supported the developer by buying the "pro" version and he promptly stopped maintaining it...and started a new project that was substantially more complicated/difficult to use, requiring writing blocking rules by hand...or paying him for the "pro" service that included 'recipes' for blocks.

Which users of the old app didn't get.

Fuck you, Marcel Bokhorst.

lc5G · 4 years ago

I do not know about this specific case and I have not used XPrivacy but I want to chime in here and say

Thank you, Marcel Bokhorst

Your NetGuard (https://github.com/M66B/NetGuard) and FairEmail (https://github.com/M66B/FairEmail) apps are great. They are high quality, open source and contain none of the dark patterns that mobile is plagued with. They are available to download from Github, F-Droid and the Playstore. There are paid premium features to support you but if I wanted to I could still compile the app myself to unlock them.

lc5G commented on Ubisoft deleted account with hundreds of dollars’ worth of games for inactivity mmos.com/news/ubisoft-del... · Posted by u/josephcsible

tjoff · 4 years ago

Sure, just like the olden days. But you still need a license key or equivalent - for an offline check. And in the case of an app store that is handled by the app store, you never get or see the key. So if you are banned that doesn't help.

And even if you had a key you still don't have access to the install media. You could try to extract it from your drive but there is no guarantee that will work on another computer or OS-install since the installer might optionally install what is needed on that computer.

lc5G · 4 years ago

This at most technically right and definitely wrong in practice. I am unsure if there is an existing exact definition of DRM (free) or you're using an uncommon definition of "license" but in practice services like GoG advertising DRM free and people buying DRM free all mean that there is no licensing check whatsoever.

A GoG game comes with a single installer executable (single as in it is the same for everyone, no built in license) that and the resulting game it installs can be freely copied and used on as many machines as you like without any requirements. For example you do not need to have an internet connection or be running the GoG store application.

So if you have downloaded and backed up the installer of the game you bought on GoG then for all intents and purposes you own this game. It does not matter what GoG does from this point on. You will always be able to use it.

lc5G commented on Tor 0day: Finding IP Addresses hackerfactor.com/blog/ind... · Posted by u/dyslexit

fsflover · 5 years ago

Yes: http://geti2p.net/en/

lc5G · 5 years ago

Could you explain why i2p works better than tor for the type of attacks from the article?

lc5G commented on China Uighurs: A model's video gives a rare glimpse inside internment bbc.com/news/world-asia-c... · Posted by u/baylearn

fiblye · 5 years ago

There are two outcomes: 1: They really will not know what you're talking about and think you're crazy and just hate Chinese people (this is common). 2: They will somewhat know what you're talking about, and have a massive list of bad things your country has done/is still doing, and you won't be happy (this is also common, but slightly less common)

If you were good friends, you can mention this and drop it and try to move on. If you're doing this at work, it won't end well for anyone involved, and it'll be doubly bad if you're in an authority position.

lc5G · 5 years ago

> They will somewhat know what you're talking about, and have a massive list of bad things your country has done/is still doing, and you won't be happy

Ignoring the "at work" part, you can then both realize that you should acknowledge and fight against any country doing bad things and that these bad things are not excused because other countries (or people) are also doing bad things. Two wrongs don't make a right.

(I'm aware you did not claim that they did.)